[elpa] externals/org 0ccf1da3dd: Merge branch 'bugfix'

[ELPA Syncer]

branch: externals/org
commit 0ccf1da3dd0f262a733c93b0d819a40f736f0a1c
Merge: 1f5afbbcfb 3176ed9052
Author: Ihor Radchenko <yantar92@posteo.net>
Commit: Ihor Radchenko <yantar92@posteo.net>

    Merge branch 'bugfix'
---
 lisp/org-persist.el | 15 +++++++++++----
 1 file changed, 11 insertions(+), 4 deletions(-)

diff --git a/lisp/org-persist.el b/lisp/org-persist.el
index 108292f1e9..1a32ed0102 100644
--- a/lisp/org-persist.el
+++ b/lisp/org-persist.el
@@ -161,7 +161,7 @@
 (declare-function org-at-heading-p "org" (&optional invisible-not-ok))
 
 
-(defconst org-persist--storage-version "2.5"
+(defconst org-persist--storage-version "2.7"
   "Persistent storage layout version.")
 
 (defgroup org-persist nil
@@ -856,9 +856,16 @@ When IGNORE-RETURN is non-nil, just return t on success 
without calling
       (setq associated (org-persist--normalize-associated (get-file-buffer 
(plist-get associated :file)))))
     (let ((collection (org-persist--get-collection container associated)))
       (setf collection (plist-put collection :associated associated))
-      (unless (seq-find (lambda (v)
-                          (run-hook-with-args-until-success 
'org-persist-before-write-hook v associated))
-                        (plist-get collection :container))
+      (unless (or
+               ;; Prevent data leakage from encrypted files.
+               ;; We do it in somewhat paranoid manner and do not
+               ;; allow anything related to encrypted files to be
+               ;; written.
+               (and (plist-get associated :file)
+                    (string-match-p epa-file-name-regexp (plist-get associated 
:file)))
+               (seq-find (lambda (v)
+                           (run-hook-with-args-until-success 
'org-persist-before-write-hook v associated))
+                         (plist-get collection :container)))
         (when (or (file-exists-p org-persist-directory) 
(org-persist--save-index))
           (let ((file (org-file-name-concat org-persist-directory (plist-get 
collection :persist-file)))
                 (data (mapcar (lambda (c) (cons c (org-persist-write:generic c 
collection)))